Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/FJUBmfaf4gnM3vZB3t0nnJUoh-s.roa
File: FJUBmfaf4gnM3vZB3t0nnJUoh-s.roa (raw, json)
Hash identifier: ncDEBJ2mnV1TxbEeiv5MSV3Xti7JCGi5DymmXgnLOdE=
Subject key identifier: 14:95:01:99:F6:9F:E2:09:CC:DE:F6:41:DE:DD:27:9C:95:28:87:EB
Certificate issuer: /CN=85ed4fcc45964d4ea72fc4492c4d7957133210c3
Certificate serial: 0872EC7C
Authority key identifier: 85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/FJUBmfaf4gnM3vZB3t0nnJUoh-s.roa
Signing time: Sat 01 Jan 2022 02:58:18 +0000
ROA not before: Sat 01 Jan 2022 02:58:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208847
IP address blocks: 45.82.232.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141749372 (0x872ec7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85ed4fcc45964d4ea72fc4492c4d7957133210c3
Validity
Not Before: Jan 1 02:58:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14950199f69fe209ccdef641dedd279c952887eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:26:4f:97:fb:3d:ee:69:ac:5b:1a:23:c3:
53:43:e9:05:6e:9d:d8:f0:b1:14:b5:b3:ef:97:b5:
c9:f7:2a:c8:1c:c1:da:25:cf:bd:ca:fc:17:fe:4c:
37:91:80:73:77:16:cd:00:a6:a7:51:04:91:bb:ad:
9a:e3:ee:1a:51:08:30:09:9d:ce:de:44:9d:4d:d5:
9f:55:cb:b8:24:1d:99:af:d6:86:00:3f:fc:5b:c6:
b2:17:41:17:fa:f9:38:8d:46:43:9f:5f:c5:95:71:
8e:45:03:a9:cf:7f:36:be:f6:58:e5:7a:0d:c9:eb:
a1:c0:74:7f:11:33:f8:67:05:2b:bd:f5:a3:2c:a1:
aa:5b:af:fd:fc:48:94:61:cf:aa:5b:dd:37:40:ba:
f9:7a:52:39:5d:3d:37:d8:3f:be:01:e1:7a:1d:4b:
bc:cc:95:27:a5:00:84:37:05:60:36:60:40:69:52:
67:1d:0d:30:f6:db:dd:60:54:d9:1e:03:92:e0:d8:
85:4f:e4:22:6f:f6:8f:34:0a:d9:0e:f8:46:99:f4:
cd:6a:95:e9:29:50:19:55:9b:ab:1d:9e:e8:94:79:
c8:69:90:2d:37:fe:09:7c:9c:c0:fd:34:fa:cf:97:
87:03:d6:04:98:53:72:ba:76:1e:a9:b6:a6:fd:c1:
0a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:95:01:99:F6:9F:E2:09:CC:DE:F6:41:DE:DD:27:9C:95:28:87:EB
X509v3 Authority Key Identifier:
keyid:85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/FJUBmfaf4gnM3vZB3t0nnJUoh-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.232.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:86:7d:b7:3e:bf:9b:e0:7d:7d:14:28:76:55:04:b7:99:e9:
c0:d4:d0:75:5a:5f:f3:9a:b5:8d:89:1e:88:5f:cd:9a:7e:3f:
43:77:ba:33:08:0d:8c:05:4a:0d:27:5e:61:41:43:56:a0:ef:
e3:17:08:7d:2e:4f:30:58:7b:ed:de:28:de:04:aa:a5:1c:58:
90:69:9f:d9:53:56:a9:e7:cc:ab:6a:91:69:53:f0:d4:8a:5c:
bc:e1:61:9d:69:1a:e0:16:99:38:bf:c2:ac:26:8c:06:db:d3:
2a:8e:80:45:ac:ad:3c:41:5c:c5:25:86:8b:3a:f5:c8:b0:12:
24:22:01:18:60:58:29:1b:f6:13:0c:b5:8e:cb:98:aa:9f:44:
10:7c:14:0b:74:3b:e8:84:d2:8c:d6:c0:47:7c:39:a0:1b:85:
30:3d:0e:43:b1:68:d7:60:f4:9c:e3:cf:37:cb:9d:87:c3:3a:
54:f4:7e:5e:5b:3f:46:37:03:ba:20:5f:5d:3f:f0:1f:96:af:
ba:e5:09:2b:b0:67:76:94:85:c0:57:49:92:f3:a2:dc:bf:db:
ab:ae:6b:f9:94:aa:a9:64:32:b4:4f:4a:dd:8a:f2:fd:cb:c2:
6d:c8:7b:b3:28:3a:1f:98:e4:a5:a5:57:01:ec:74:44:8b:f8:
d8:ba:e2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:17 2024 by rpki-client on console-ams.rpki-client.org